none
Runas Credentials Injection Stopped Working RRS feed

  • Question

  • There's a method of using 'RUNAS' command with 'netonly' so you could save fake credentials in memory.

    I check the result with mimikatz.

    I search to see a record with the credentials of the user I registered in the runas command.

    For some reason it worked for me once, but never again since, and I tried several time on different computer with different users.

    It just stopped working, mimikatz won't show the credentials record of that runas login.

    Can anyone of you guys think on a reason why I can't see the credentials in mimikatz anymore?

    Thanks.

    Saturday, June 29, 2019 11:21 AM